Kungani i-URL yakho idinga ukungena kuphothi 80 noma 443, hhayi 45000
Isiphequluli sikhetha u-80 noma u-443 kusukela kusikimu, hhayi kuphothi eliphezulu lomhlinzeki wakho. Landa indlela yokungena kanye nomthombo okushiyelwa yiwo wonke umkhetho wokushicilela.
Bhala igama lomsingathi kusiphequluli futhi isikimu sinquma iphothi lendawo: 80 ye-http, 443 ye-https. Akukho lutho empendulweni ye-DNS olukushitsha lokho, futhi awukho umthetho wokudlulisa kumshini wakho ongasungula isilaleli emaphethelweni omhlinzeki. Uma umhlinzeki we-VPN ekunikeza iphothi lomphakathi eliphezulu njengo-45000, i-URL ecacile iyasebenza kanti ehlanzekile ayisebenzi. Igebe lisekhoneni lokungena, hhayi ngaphakathi kohlelo lokusebenza.
Landa indlela esuka kusiphequluli iya kunqubo kanye, futhi izinketho ezintathu zokushicilela ziyeke ukubonakala ziyimfihlo.
Bheka ukuthi isicelo siya kuphi ngempela
Isiphequluli sixazulula igama sibe ikheli, bese sixhuma kulelo kheli kuphothi lokusikhathi elizenzakalelayo lesikimu ngaphandle uma i-URL isho elinye. Umphetho womhlinzeki wakho unquma ukuthi kwenzeka ini kuxhumano olungenayo. Uma ithebula lakhe lokudlulisa lihlanganisa u-45000 kuphela nekheli lakho langaphakathi, uxhumano oluya ku-80 alunandawo yokuya futhi luyenqatshwa noma lulahliwe ngaphambi kokuba umshini wakho uhlanganyele.
Lokho kwenqatshwa kwenzeka emaphethelweni, yingakho amalogi ohlelo lokusebenza lwakho engabonisi lutho. Ukungabi khona kwamalogi kuwubufakazi bokuthi iphakethe lama kuphi, hhayi ubufakazi bokuthi uhlelo lokusebenza luphukile.
Kungani umthetho wasekhaya ungeke ulungise umphetho
Ukudlulisela kabusha noma umthetho we-DNAT kumsingathi wohlelo lokusebenza usebenza kumaphakethe asevele afikile. Amaphakethe athunyelwa kuphothi 80 kumhlinzeki awafiki neze, ngakho umthetho awuhlolwa neze. Leli yihora elichithwa kakhulu kuyo yonke inkinga.
I-DNS nayo ayikwazi ukuthwala iphothi. isicaciso se-HTTP ichaza izimo ezizenzakalelayo zesikimu, futhi irekhodi le-A noma i-AAAA libuyisela ikheli kuyilapho i-CNAME ibuyisela elinye igama. Isiphequluli sisaxhumanisa iphothi lesikimu, ngakho iphothi elicacile ku-URL kuphela elishintsha indawo.
Inketho yokuqala: gcina iphothi elicacile
Imvamisa impendulo efanele yileyo engenaso isibhamu. Shicilela i-URL ephelele nefuthi iphothi, qeda i-TLS ekungeneni okulisekelayo, futhi uqinisekise ukuthi zonke izixhumanisi ezikhiqizwayo zigcina umthombo ofanayo. Kubabukeli abancane abalawulwayo lokhu kuphelele, futhi akubizi lutho ngaphandle kwenombolo yephothi ebonakalayo.
Hlola ukudlulisela kabusha kanye nobubanzi bamakhukhi ngenkathi ukhona, ngoba i-backend ebhala igama layo lomsingathi kusihloko se-Location ichitha leli lungiselelo.
Inketho yesibili: thola ukungena kwangempela kuphothi elizenzakalelayo
Abanye abahlinzeki namalungiselelo okusingatha badlulisa u-80 no-443 ekhelini elabiwe noma elikhethiwe njengensizakalo ebhalwe phansi. Buza ukuthi yini ngempela efakiwe esikhundleni sokucabanga ukuthi ikheli lokuphuma lomphakathi lisho amaphothi angenayo anganakiwe. Ikheli lokuphuma elikhethiwe alisho lutho ngokudluliswa okungena.
Qinisekisa ubunikazi nokutholakala ngokubhala, kuhlanganise nokuthi kwenzeka ini ekungeneni lapho umhubhe uxhuma kabusha nekheli elihlukile. Ukungena okuhamba nomhubhe kudala ukuphazamiseka okubonakala njengokwehluleka kwe-DNS.
Inketho yesithathu: beka i-frontend phambili
I-proxy ehlanekezelwe ekhelini elifinyelelekayo ingase ukulalela ku-443 nokuqeda i-TLS futhi ivule uxhumano olwahlukile lwe-backend nge-VPN. Izivakashi zibona igama nefuthi iphothi le-frontend, kuyilapho i-frontend ikhuluma nephothi eliphezulu le-backend esikhundleni sakho. Lokhu kuyasebenza ngoba kushintsha ukwakheka esikhundleni sokulwa nekhona lokungena. I-backend ke ayidingi nhlobo iphothi elingenayo ku-inthanethi yomphakathi.
Kushintsha futhi lokho okusebenzisayo. I-frontend inegunya le-TLS lomphakathi, inqubomgomo yokufinyelela, amalogi nokutholakala, futhi kufanele ikhawulele ukukhethwa kwe-backend ensizakalweni ehlosiwe. Uma ukweqa kusuka ku-frontend kuya ku-backend kusebenzisa i-HTTPS, gcina ukuqinisekiswa kwesitifiketi kulokho kweqa.
Gcina umthombo owodwa
Igama lomsingathi lomphakathi, isikimu nephothi le-frontend zakha umthombo osetshenziswa izivakashi, ngakho lungiselela i-URL yangaphandle yohlelo lokusebenza, ukudlulisela kabusha namakhukhi kulo mthombo. Thumela umsingathi wangempela nesikimu esidlulisiwe uma uhlelo lokusebenza lwakha izixhumanisi eziphelele. Impendulo ebuyisela abasebenzisi egameni langasese noma kuphothi eliphezulu ichitha ukungena okuhlanzekile okusanda kukwakhiwa.
Bese unquma ngokugcina izibukeli engqondweni. I-URL emfushane ingase ithethelele i-frontend elawulwayo, futhi akufanele ukuguqula ngokungahlosiwe insizakalo yangasese ye-VPN kuphela ibe ngumphakathi.